65146 matches found
GHSA-72J9-356V-88XQ
creationtimestamp| type| source ---|---|--- 2026-07-07 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mpzcgcfkjb2s...
PT-2026-56254
Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The ShareSecretManage component uses a hardcoded default share link signature key. An attacker who obtains a passwordless share for a resource and user can use the known key link-pwd-fit2cloud to...
PT-2026-56249
Name of the Vulnerable Software and Affected Versions Dashy versions prior to 4.3.7 Description The workspace view fails to validate the scheme of the URL query parameter before assigning it to an iframe source. This allows an attacker to execute JavaScript on the Dashy origin by tricking a...
PT-2026-56244
Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The /de2api/share/proxyInfo share interface generates and returns an X-DE-LINK-TOKEN before validating the share password or ticket. This allows unauthenticated attackers who possess a protected...
PT-2026-56300
Name of the Vulnerable Software and Affected Versions Better Auth versions prior to 1.6.11 Description An issue exists in the OAuth callback auto-link gate within the handleOAuthUserInfo function. The system allows implicit account linking when an OAuth provider asserts email verified: true witho...
The vulnerability of the smb2_sess_setup() function in the fs/smb/server/smb2pdu.c module, which is part of the SMB server support in Linux kernel, allows a hacker to cause a service failure.
The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the SMB server implementation in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-55500
creationtimestamp| type| source ---|---|--- 2026-07-06 22:32:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpz5g2pefd23 2026-07-10 15:57:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcjavfcqz24 2026-07-10 17:00:40+00:00| seen|...
GHSA-473P-56XX-VG67 Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
Summary In Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...
GHSA-287W-MXQ6-X2CP
creationtimestamp| type| source ---|---|--- 2026-07-06 21:42:10+00:00| seen| https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e...
CVE-2025-53831
creationtimestamp| type| source ---|---|--- 2026-07-06 21:22:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyzjfmjlm2i...
CVE-2026-14898
creationtimestamp| type| source ---|---|--- 2026-07-06 20:51:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxsv3wbl2n...
CVE-2026-54060
creationtimestamp| type| source ---|---|--- 2026-07-06 20:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyxay7yvu24 2026-07-07 05:11:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpztpioixl27 2026-07-20 22:37:44+00:00| published-proof-of-concept|...
Directory Traversal
Overview org.webjars.npm:decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the...
Directory Traversal
Overview decompress is a package that can be used for extracting archives. Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory...
Directory Traversal
Overview @xhmikosr/decompress is an Extracting archives made easy Affected versions of this package are vulnerable to Directory Traversal and link following during archive extraction, where symlink and hardlink entries are created without checking their targets and the directory containment check...
CVE-2026-55379
creationtimestamp| type| source ---|---|--- 2026-07-06 20:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpywg4twbd2z 2026-07-20 22:37:42+00:00| published-proof-of-concept| https://github.com/python-pillow/Pillow/security/advisories/GHSA-45hq-cxwh-f6vc...
CVE-2026-9182
creationtimestamp| type| source ---|---|--- 2026-07-06 20:18:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpyvxqfq4f2z 2026-07-08 03:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mq47nlkutf2h...
EUVD-2026-24981
rm: --preserve-root bypassed via a symlink to / string check instead of dev/inode...